Privacy Policy

The entrepreneur ORO SK s.r.o., operating the online stores www.alaskarefrigerants.com, www.alaskarefrigerants.hu, www.alaskarefrigerants.fr, www.alaskarefrigerants.de, www.alaskarefrigerants.at, www.alaskarefrigerants.ro, www.alaskarefrigerants.es, and www.alaskarefrigerants.it, hereby provides information regarding its data processing practices to visitors of the websites and individuals who contact its customer service by phone (hereinafter jointly referred to as: “data subject” or “visitor”). This notice includes details on how personal data is handled, the technical measures taken to protect such data, and the legal remedies available to visitors.

Table of Contents:

  • Data Controller
  • Principles of Data Processing
  • Data Processing Activities
  • 1. Use of Cookies
  • 2. Data Processing Related to Newsletters
  • 3. Registration and Placing Orders
  • 4. Complaint Handling
  • 6. Facebook Page
  • 7. Personal Data Processed on www.alaskarefrigerants.com
  • 8. Use of YouTube, Instagram, and Facebook Links
  • 9. Other Data Processing Activities
  • Data Security
  • Data Processors
  • Rights of Data Subjects and Enforcement
  • 1. Measures Taken by the Controller in the Exercise of Data Subject Rights
  • 2. Right of Access
  • 3. Right to Rectification
  • 4. Right to Erasure – “Right to be Forgotten”
  • 5. Right to Restriction of Processing
  • 6. Right to Data Portability
  • 7. Right to Object
  • 8. Legal Remedies

1.) Data Controller

The controller of personal data is ORO SK s.r.o., with the following contact details:

Mailing address: Slovakia, 943 61 Salka 384
E-mail: info@alaskarefrigerants.com
Phone number: –
VAT number: SK2122280556
Company registration number: 56329971
Legal representative: Barnabás Szécsényi
Data protection officer: Barnabás Szécsényi

2.) Principles of Data Processing

During the operation of the websites www.alaskarefrigerants.com, www.alaskarefrigerants.hu, www.alaskarefrigerants.fr, www.alaskarefrigerants.de, www.alaskarefrigerants.at, www.alaskarefrigerants.ro, www.alaskarefrigerants.es, and www.alaskarefrigerants.it, personal data is collected, processed, and used when visiting the site, registering, placing orders, or subscribing to our newsletter.

According to Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR), personal data means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

We process personal data lawfully, fairly, and in a transparent manner in relation to the data subject, solely for specified purposes, and in accordance with the principle of data minimization. We only process personal data that is strictly necessary for the realization of the processing purpose and suitable to achieve that purpose. Data is processed only to the extent and for the duration necessary to fulfill the intended purpose.

In the course of our data processing activities, we comply with the following legal regulations:

  • Act CLV of 1997 on Consumer Protection
  • Act C of 2000 on Accounting
  • Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services
  • Act C of 2003 on Electronic Communications
  • Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities
  • Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
  • Act V of 2013 on the Civil Code
  • Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR)

3.) Data Processing

3.1. Use of Cookies

When a data subject visits the www.alaskarefrigerants.com website, our website places cookies—short data files—on the visitor’s device. This allows our website to recognize the device used by the visitor when a connection is established between the website and the visitor’s device.

Temporary cookies are placed on the visitor’s device only during a specific session and are deleted once the session ends.

We also use persistent cookies on our website, which remain on the visitor’s device until manually deleted. Our website uses cookies that collect data about the user’s browsing habits in order to display personalized advertisements on their device.

The cookies used on our website include:

Cookie Name

Purpose

Type

Lifetime

Legal Basis

Google Analytics

Collecting detailed statistical data

Behavioral tracking

1 year

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Cookie

Search engine, research

Behavioral tracking

1 year

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Optimonk

Advertising, retargeting

Behavioral tracking

4 years

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Facebook

Follows Facebook users (and non-users) for market research and product development

Behavioral tracking

1 year

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Facebook Pixel

Conversion tracking

Non-behavioral

1 year

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Google Ads Enhanced Conversions

Conversion tracking

Non-behavioral

2 years

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Google Tag Manager

Monitoring analytics and advertising

Non-behavioral

1 year

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Bing Ads UET (Universal Event Tracker)

Advertising, retargeting

Behavioral tracking

180 days

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

Bing Ads Conversion Code

Conversion tracking

Non-behavioral

180 days

Data subject’s consent – GDPR Art. 6 (1) a), Infotv. §5 (1) a), E-kertv. §13/A (4)

 

Google Ads Enhanced Conversions: To analyze purchases, the website also uses Google’s Enhanced Conversions cookie. Detailed information about its use and operation can be found at: https://www.google.de/intl/de/adsense/start/. Google’s privacy policy related to customer data is available at: https://support.google.com/adspolicy/answer/7475709?hl=hu.

Automated Decision-Making and Profiling: Based on personal data collected through cookies regarding browsing habits, personalized advertisements are displayed to visitors, tailored to their browsing history.

3.2. Data Processing Related to Newsletters

Scope of processed data: For subscribers to the newsletter, we process the following personal data: e-mail address, name, postal code, gender, age, interests, shopping habits, date of subscription, IP address at the time of subscription, time of confirmation, IP address of confirmation, newsletter opens, and clicks on links within the newsletters.

Purpose of data processing:Building a direct marketing database and sending commercial advertisements to newsletter subscribers, including notifications about new offers, promotions, sweepstakes, and abandoned cart reminders for products placed in but not ordered from the shopping cart.

Legal basis for processing:The data subject’s consent, in accordance with Article 6 (1) a) of the GDPR and Section 5 (1) a) of the Hungarian Information Act (Infotv). Consent can be withdrawn at any time by sending an e-mail to info@alaskarefrigerants.com or a letter to ORO SK s.r.o., Slovakia, 943 61 Salka 384.

Additionally, data may be processed based on the data controller’s legitimate interest under Article 6 (1) f) of the GDPR. In this case, the data subject has the right to object at any time to the processing of their personal data by contacting the above e-mail or postal address.

Duration of data processing:Until deletion is requested by the data subject. Each newsletter includes an unsubscribe link, allowing immediate cancellation. Unsubscription can also be requested via the contact details listed in section 1.

Automated decision-making and profiling:Based on personal data, we assign subscribers to customer profiles and send them newsletters tailored to their specific profile.

3.3. Registration and Placing Orders

Scope of processed data:During registration: title, last name, first name, phone number, email address, password. During order placement: delivery method, payment method, billing address, shipping address

Purpose of data processing:To create and fulfill contracts, issue invoices, handle contract-related claims, and maintain customer communication.

Legal basis for processing:

Fulfillment of a contract: the processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract – GDPR Article 6 (1) b)

If the contract has been concluded and fulfilled, further processing is based on the controller’s legal obligation – GDPR Article 6 (1) c)

Duration of data processing:Until deletion is requested by the data subject. However, if a contract is concluded, data must be retained for 8 years in accordance with Section 169 (2) of the Accounting Act (Számvtv).

3.4. Complaint Handling

  1. A) Verbal complaints (Fgytv §17/A (2))

In case of a verbal complaint made via customer service phone call, if the consumer does not agree with the handling of the complaint or immediate investigation is not possible, ORO SK s.r.o. records the consumer’s personal data in a complaint report.

Scope of processed data:Name, address, email, phone number; location, date, and method of the complaint; detailed description of the complaint; list of documents and evidence provided by the consumer; the company’s statement regarding the complaint; location and time of the report; unique complaint ID; and any additional voluntarily provided data.

Purpose of data processing:Complaint management.

Legal basis for processing:The data subject’s consent – GDPR Article 6 (1) a), Infotv §5 (1) a); consent may be withdrawn anytime via email to info@alaskarefrigerants.com or by letter to ORO SK s.r.o., Slovakia, 943 61 Salka 384.

Also based on Fgytv §17/A (3)-(7).

Duration of data processing:5 years according to Fgytv §17/A (7).

  1. B) Written complaints (Fgytv §17/A (6))

In case of a written complaint via email or post, ORO SK s.r.o. processes the consumer’s personal data.

Scope of processed data:All data voluntarily provided by the consumer in the complaint.

Purpose of data processing:Complaint management.

Legal basis for processing:

  • Data subject’s consent – GDPR Article 6 (1) a), Infotv §5 (1) a); consent may be withdrawn at any time via the above contact details.
  • Fgytv §17/A (6)-(7)
  • Contract performance – GDPR Article 6 (1) b), if the processing is necessary for fulfilling a contract to which the data subject is a party or for taking steps prior to entering into a contract at the request of the data subject.

 

3.5. Alaska Refrigerants Facebook Page

Visitors of the Facebook page operated by ORO SK s.r.o. may post comments and send messages, during which they may provide personal data.

On the Facebook platform, personal data is also processed by Facebook itself. For more information on Facebook’s data processing, please refer to its Privacy Policy.

Scope of data processed by ORO SK s.r.o.:All data voluntarily provided by the data subject in comments or messages, as well as publicly available profile data, provided that the user has liked or followed the page.

The company has no control over which profile data is made public; these settings can be adjusted by the data subject at: https://www.facebook.com/settings?tab=privacy.

Purpose of data processing:Managing customer interactions, answering inquiries, and—in case the user has liked or followed the page—sharing and promoting the Facebook page, promotions, and products.

Legal basis for processing:The data subject’s consent pursuant to GDPR Article 6 (1) a) and Infotv. §5 (1) a).

Duration of data processing:Until deletion is requested by the data subject, with a maximum retention period of 5 years.In addition, Facebook provides anonymized statistical data (e.g. age, gender, location), which is used to improve our page.

3.7. Personal Data Processed on www.alaskarefrigerants.com

On the websites www.alaskarefrigerants.com, www.alaskarefrigerants.hu, www.alaskarefrigerants.fr, www.alaskarefrigerants.de, www.alaskarefrigerants.at, www.alaskarefrigerants.ro, www.alaskarefrigerants.es, and www.alaskarefrigerants.it, visitors can post comments and send messages to the company, thereby voluntarily providing personal data.

Scope of data processed:Any personal data voluntarily provided in comments or messages by the user.

Purpose of data processingTo handle customer feedback and respond to inquiries.

Legal basis for processing:The data subject’s consent pursuant to GDPR Article 6 (1) a) and Infotv. §5 (1) a).

Duration of data processing:Until deletion is requested by the data subject, with a maximum retention period of 5 years.

3.8. Use of YouTube, Instagram, and Facebook Links

The websites www.alaskarefrigerants.com, www.alaskarefrigerants.hu, www.alaskarefrigerants.fr, www.alaskarefrigerants.de, www.alaskarefrigerants.at, www.alaskarefrigerants.ro, www.alaskarefrigerants.es, and www.alaskarefrigerants.it contain links to the Alaska Refrigerants subpages hosted on YouTube, Instagram, and Facebook.

Clicking these links opens the respective third-party platform, where users can view the Alaska Refrigerants page after logging in.

3.9. Other Data Processing Activities

For any data processing not listed in this notice, information will be provided directly before data collection.

4.) Data Security

ORO SK s.r.o. ensures the protection of personal data through the following organizational and technical measures:

  • According to internal policies, access to personal data is granted only to employees whose job function requires it.
  • Protection of electronically stored personal data is ensured through continuous antivirus protection, firewall systems, and logging activities, allowing control over who accessed the data and when. These measures help prevent computer fraud and unauthorized access to the IT system.

5.) Data Processors

A data processor is any organization listed below that processes specific personal data of the data subject on behalf of ORO SK s.r.o.

Data processing refers to the performance of technical tasks related to the handling of the data subject’s personal information.

Company name

Address

Activity

Information

Stripe INC.

https://stripe.com/en-hu

bankkártya tranzakció hitelesítés

érintett e-mail címe, fizető azonosító, tranzakció összege, dátuma, időpontja, számlázási adatok

DPD Hungary Kft. 

1134 Budapest, Véci út 33. 2. emelet.

futárszolgálati tevékenység

érintett neve, fizető azonosító, trnazakció összege, dátum, szállítási cím, telefonszám

Brown Kft.

6120 Kiskunmajsa, Alkotmány utca 17.

marketing tevékenység

érintett neve, email címe, telefonszáma

GLS Hungary

HU – 2351 Alsónémedi, GLS Európa u. 2.

futárszolgálati tevékenység

érintett neve, fizető azonosító, trnazakció összege, dátum, szállítási cím, telefonszám

 

I acknowledge that my personal data stored in the user database of the websites www.alaskarefrigerants.com, www.alaskarefrigerants.hu, www.alaskarefrigerants.fr, www.alaskarefrigerants.de, www.alaskarefrigerants.at, www.alaskarefrigerants.ro, www.alaskarefrigerants.es, and www.alaskarefrigerants.it may be transferred by the data controller, ORO SK s.r.o. (Slovakia, 943 61 Salka 384), to Stripe as data processor

The scope of the data transferred by the controller includes:

payer ID, transaction amount, date and time, data subject’s name, email address, phone number, billing address, product name, and date of purchase.

The nature and purpose of the data processing activity performed by the processor can be found in Stripe’s Privacy Policy at the following link: https://stripe.com/en-hu/privacy

6.) Rights of Data Subjects and Their Enforcement

6.1. Measures Taken by the Data Controller When Exercising Data Subject Rights

When exercising the rights set out in this section, the data controller shall inform the data subject without undue delay and in any event within one month of receipt of the request about the actions taken in response to the request. If necessary, considering the complexity and number of requests, this period may be extended by a further two months. The data controller shall inform the data subject of any such extension within one month of receiving the request, together with the reasons for the delay.

If the data controller does not act upon the data subject’s request, it shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority and seeking judicial remedy.

The information and any action taken upon request shall be provided free of charge. Where requests are clearly unfounded or—especially due to their repetitive nature—excessive, the data controller may charge a reasonable fee considering the administrative costs of providing the information or taking the requested action, or may refuse to act on the request. The burden of demonstrating that a request is clearly unfounded or excessive lies with the data controller

If the data controller has reasonable doubts concerning the identity of the natural person making the request, it may request additional information necessary to confirm the identity of the data subject.

6.2. Right of Access

The data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning them is being processed. Where such processing is taking place, the data subject has the right to access the personal data and the following information:

  • the purposes of the data processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data is not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs.

Where the data subject makes the request by electronic means, the information shall be provided in a commonly used electronic format, unless otherwise requested by the data subject.

6.3. Right to Rectification

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The data controller shall inform each recipient to whom the personal data has been disclosed of any rectification, unless this proves impossible or involves disproportionate effort.

Upon request, the data controller shall inform the data subject about those recipients.

6.4. Right to Erasure (“Right to be Forgotten”)

The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, where one of the following grounds applies:

  • the personal data is no longer necessary for the purpose for which it was collected or otherwise processed;
  • the data subject withdraws their consent on which the processing is based, and there is no other legal ground for the processing;
  • the data subject objects to the processing, and there are no overriding legitimate grounds for the processing, or the objection concerns direct marketing purposes;
  • the personal data has been unlawfully processed;
  • the personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the controller;
  • the personal data was collected in connection with the offer of information society services.

 

This right does not apply where processing is necessary, including but not limited to:

  • compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • the establishment, exercise, or defense of legal claims.

The data controller shall inform each recipient to whom the personal data has been disclosed about the erasure, unless this proves impossible or involves disproportionate effort. Upon request, the data controller shall inform the data subject about these recipients.

6.5. Right to Restriction of Processing

The data subject has the right to obtain from the data controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, in which case processing shall be restricted for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of its use instead;
  • the controller no longer needs the personal data for processing purposes, but the data is required by the data subject for the establishment, exercise, or defense of legal claims; or
  • the data subject has objected to processing, in which case the restriction applies for the period during which it is determined whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent, or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

The data controller shall inform the data subject who has obtained restriction of processing in accordance with the above, before lifting the restriction.

The data controller shall notify each recipient to whom the personal data has been disclosed of any restriction of processing, unless this proves impossible or involves disproportionate effort. Upon request, the data controller shall inform the data subject about such recipients.

6.6. Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another data controller without hindrance from the controller to which the personal data was provided, where:

  • the processing is based on consent or on a contract; and
  • the processing is carried out by automated means.

In exercising the right to data portability pursuant to the above, the data subject also has the right to request that the personal data be transmitted directly from one controller to another, where technically feasible.

6.7. Right to Object

The data subject has the right to object at any time to the processing of their personal data if the legal basis for the processing is the legitimate interest of the data controller. In such cases, the controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

6.8. Legal Remedies

If your rights related to data processing are violated, you may take the matter to court. The case falls under the jurisdiction of the regional court. The lawsuit—at the data subject’s choice—may also be initiated before the regional court having jurisdiction over their place of residence or stay.

You may also seek remedy from the Office for Personal Data Protection of the Slovak Republic:

  • Address: Hraničná 12, 820 07 Bratislava 27, Slovak Republic
  • Phone: +421 2 3231 3214
  • Fax: +421 2 3231 3234
  • Email:dozor@pdp.gov.sk
  • Website: https://dataprotection.gov.sk/uoou/

The data controller is liable for any damage caused by the unlawful processing of data or by the breach of data security requirements by the data controller or any data processor acting on its behalf.

If unlawful processing of your data or a breach of data security results in a violation of your personal rights, you may claim compensation for non-material damage.

Date of issue: 2024.04.10.
Last modified: 2025.04.17.